$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: y8vQRK3kkppX7Om71sZQ+JMQOtqJvpAdai8g0L/pGCg= Subject key identifier: EB:46:87:2D:B3:A9:02:0D:BC:DA:6E:AF:89:A5:7A:3A:08:90:11:1C Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019A1E3EB6D4A88BB42205C5CEAB11E7A83C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 1704 Signing time: Sun 26 Oct 2025 02:00:17 +0000 Manifest this update: Sun 26 Oct 2025 02:00:17 +0000 Manifest next update: Mon 27 Oct 2025 02:00:17 +0000 Files and hashes: 1: 0UXplScy_6bUua8Xwkci_CpGwkM.roa (hash: GRvkp2Rt8JLqAH5NPvZRPj7s1HlR19kYp/7XCNsxyNE=) 2: 14gXO5PLi0LoZ0DYGh9KK795laQ.roa (hash: EARGMMjNyaWuZ1stJfG6h12JcDBEupf11Ssao/d8baM=) 3: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=) 4: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=) 5: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=) 6: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=) 7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=) 8: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=) 9: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: MBV9wg+b5vwmVm/a3YdxFw8k9n5BNU4Lnaff8MhcBUk=) 10: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 02:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1e:3e:b6:d4:a8:8b:b4:22:05:c5:ce:ab:11:e7:a8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Oct 26 02:00:17 2025 GMT Not After : Oct 27 02:00:17 2025 GMT Subject: CN=eb46872db3a9020dbcda6eaf89a57a3a0890111c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d2:be:7b:99:bb:6e:3e:24:37:0c:90:96:c9: 53:46:c4:04:2b:02:ec:1b:83:dd:95:85:cd:09:75: 69:05:61:ba:ba:d1:a4:b1:bb:30:73:ed:a7:65:f1: fb:28:f6:11:29:f5:30:09:7a:3f:44:13:af:af:ac: 9d:84:3c:fb:b0:6b:13:3d:73:d7:3c:3a:54:83:6f: 1f:bf:76:25:53:0d:45:fb:39:d2:d9:63:c5:66:12: c2:1a:01:9d:a3:b4:12:32:c6:60:ed:ac:86:91:ab: d7:68:77:db:3b:71:94:09:79:ed:76:0d:8a:2e:cf: d2:aa:27:b3:88:12:fd:7b:ca:e7:27:d5:d4:f2:25: 04:4f:7c:c7:ae:40:8b:f0:ab:8c:ef:10:a6:64:51: 3d:af:ee:a7:fc:c7:03:37:1e:1c:d3:5e:fc:be:c7: ae:96:4f:40:8a:54:5c:97:5b:e9:22:2d:32:dd:47: d6:79:3d:ef:2f:40:ba:63:5d:75:e4:6d:fb:66:8a: a2:b9:0e:63:7e:36:04:90:38:33:ed:c9:94:cb:38: 7f:3f:2c:55:c3:1d:80:91:b1:fa:11:da:69:94:c1: 7a:f9:db:bb:f5:bc:9c:9e:c0:6a:57:37:c5:d0:b4: ea:11:46:22:00:9e:ae:68:67:2c:ef:4d:dc:19:48: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:46:87:2D:B3:A9:02:0D:BC:DA:6E:AF:89:A5:7A:3A:08:90:11:1C X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:0f:e6:d1:ec:43:8e:93:f3:1e:6a:89:32:a2:55:45:c1:84: 58:57:b4:48:60:75:af:ed:d3:32:cc:6a:33:74:d0:e8:f8:e0: 40:00:d4:da:27:87:83:84:db:d3:23:7c:56:4e:76:de:f9:dc: a2:f5:92:cf:3a:84:cd:46:b4:9b:8b:90:32:1e:40:7a:a0:5a: 71:7d:07:44:a7:8b:c7:87:a9:49:74:0a:53:88:17:47:4b:d9: 12:0f:55:92:38:d4:15:f8:b6:01:13:8a:4c:3a:92:37:54:ed: 04:cd:53:a7:1b:bc:ac:d3:cf:c7:34:09:24:a9:f5:bf:b3:46: 20:ca:99:79:1e:03:ab:c9:8b:ab:ff:9a:d2:8a:f4:47:1d:bb: b4:e5:62:7b:ef:62:8f:36:6f:91:28:99:e0:f1:63:de:43:01: b5:a3:b6:d0:f4:9f:59:6a:0a:ff:48:63:8f:6f:8e:2b:0f:76: 8f:ee:6f:97:0d:3a:95:89:0c:37:40:88:0f:12:f6:2a:52:6a: ef:9d:7a:6f:50:12:45:6e:a0:b3:e4:50:67:0e:ac:bc:87:2d: e1:a0:f1:0f:3f:b0:75:1b:37:a2:46:10:dd:49:04:6b:3c:19: 93:da:c2:42:65:7b:96:1e:05:7f:10:9c:8d:11:44:e7:1b:1a: 38:dd:81:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoePrbUqIu0IgXFzqsR56g8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjUxMDI2MDIwMDE3WhcNMjUxMDI3MDIwMDE3WjAzMTEwLwYDVQQD EyhlYjQ2ODcyZGIzYTkwMjBkYmNkYTZlYWY4OWE1N2EzYTA4OTAxMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dK+e5m7bj4kNwyQlslTRsQEKwLs G4PdlYXNCXVpBWG6utGksbswc+2nZfH7KPYRKfUwCXo/RBOvr6ydhDz7sGsTPXPX PDpUg28fv3YlUw1F+znS2WPFZhLCGgGdo7QSMsZg7ayGkavXaHfbO3GUCXntdg2K Ls/SqieziBL9e8rnJ9XU8iUET3zHrkCL8KuM7xCmZFE9r+6n/McDNx4c0178vseu lk9AilRcl1vpIi0y3UfWeT3vL0C6Y1115G37ZoqiuQ5jfjYEkDgz7cmUyzh/PyxV wx2AkbH6EdpplMF6+du79bycnsBqVzfF0LTqEUYiAJ6uaGcs703cGUgUpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtGhy2zqQINvNpur4mlejoIkBEcMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABg/m0exD jpPzHmqJMqJVRcGEWFe0SGB1r+3TMsxqM3TQ6PjgQADU2ieHg4Tb0yN8Vk523vnc ovWSzzqEzUa0m4uQMh5AeqBacX0HRKeLx4epSXQKU4gXR0vZEg9VkjjUFfi2AROK TDqSN1TtBM1Tpxu8rNPPxzQJJKn1v7NGIMqZeR4Dq8mLq/+a0or0Rx27tOVie+9i jzZvkSiZ4PFj3kMBtaO20PSfWWoK/0hjj2+OKw92j+5vlw06lYkMN0CIDxL2KlJq 7516b1ASRW6gs+RQZw6svIct4aDxDz+wdRs3okYQ3UkEazwZk9rCQmV7lh4FfxCc jRFE5xsaON2Bmg== -----END CERTIFICATE-----Generated at Sun Oct 26 11:13:51 2025 by rpki-client